Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
File: 326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa (raw, json)
Hash identifier: MPR5bA9gNpyTmdLHuMEHfYiMIk6mfC2LWbO7jcnobvo=
Subject key identifier: FC:90:E0:63:2F:5B:14:07:5A:7C:4A:78:4B:8F:01:BA:B1:42:B8:10
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 64BBDE2E6B59184E7F498DCAD01F6D5116354270
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
Signing time: Sat 08 Jun 2024 21:02:50 +0000
ROA not before: Sat 08 Jun 2024 20:57:50 +0000
ROA not after: Sat 07 Jun 2025 21:02:50 +0000
asID: 214775
IP address blocks: 2a14:7c0:4d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bb:de:2e:6b:59:18:4e:7f:49:8d:ca:d0:1f:6d:51:16:35:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Jun 8 20:57:50 2024 GMT
Not After : Jun 7 21:02:50 2025 GMT
Subject: CN=FC90E0632F5B14075A7C4A784B8F01BAB142B810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:4d:29:e5:48:fc:8a:fc:99:bf:8a:0e:ad:
52:e4:c4:fa:b7:51:d4:fe:42:f5:da:5d:f2:99:28:
21:a6:6c:57:ca:94:94:3f:62:f7:70:dd:0f:fd:a9:
b8:3f:d4:89:02:2f:2d:69:05:04:bd:d9:33:bb:df:
12:cd:18:27:01:b9:81:7d:1f:b2:2f:fb:c3:13:1e:
3d:a4:15:ab:51:46:3e:24:68:f0:f6:73:e6:c4:de:
b5:d1:ec:17:59:25:9f:d5:a4:31:59:c2:d3:30:6a:
7b:4f:91:11:f1:44:61:1c:c5:d4:0e:bc:6e:27:cc:
4c:9b:a1:13:e6:6d:5c:0c:54:72:6d:27:22:bb:15:
19:19:00:ed:b2:13:ae:71:48:08:65:1f:8f:b3:f9:
fc:46:ad:76:5c:b7:41:3c:d2:de:74:64:2e:00:00:
0d:75:cc:e5:ef:18:01:0e:24:e7:6c:52:24:0b:80:
5e:ab:8a:f7:6a:35:3a:73:e5:44:b5:6f:c6:26:c5:
ae:e4:5e:eb:e4:6b:c5:f7:32:11:31:4b:79:c3:c8:
68:26:95:b8:0a:8b:2e:1d:42:5d:de:40:b7:e9:47:
f1:e7:f2:b0:d9:9c:ae:8c:e0:06:5e:ea:89:34:43:
25:22:ee:f4:57:ce:66:89:79:5c:ef:2c:2d:47:37:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:E0:63:2F:5B:14:07:5A:7C:4A:78:4B:8F:01:BA:B1:42:B8:10
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4d00::/40
Signature Algorithm: sha256WithRSAEncryption
48:b0:49:e7:04:8e:3c:43:f3:dc:b0:65:84:88:72:85:d1:71:
94:bd:41:fc:9a:91:65:a3:0c:f4:0d:f5:b5:b2:65:94:1e:8a:
22:8a:58:0b:a1:5f:ec:52:74:50:7a:95:7f:b2:75:68:73:94:
42:7e:a6:f3:90:93:79:59:db:f4:95:14:12:9f:0f:7a:ab:69:
59:7d:82:0c:d4:e8:fe:4f:4b:28:dc:95:4b:7e:97:03:73:eb:
75:fa:37:68:db:c9:85:09:cf:13:46:17:1b:48:12:eb:4e:d2:
45:29:38:f5:3f:4d:75:3e:ff:60:ec:b5:f9:6f:2a:f5:2d:12:
02:a8:50:f6:ac:2a:57:2b:3f:b6:89:93:2a:0e:c7:2a:30:01:
47:26:a0:d4:7f:04:76:01:1a:12:3d:41:b1:b5:57:20:7f:c1:
cd:e5:b2:ff:39:0d:99:5c:92:20:d1:ed:75:2e:61:6e:26:a6:
5b:bd:69:20:b8:9a:49:45:bb:0f:af:28:f3:9f:fb:43:ed:c2:
e2:1c:65:63:27:f4:55:64:6d:87:75:80:6f:37:22:56:a9:1d:
96:15:1f:c4:e6:0c:b2:a7:e0:1b:a2:c8:55:00:ff:6f:b1:6a:
44:1f:c0:de:18:06:78:70:00:17:af:81:92:c4:94:34:de:62:
fc:95:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 00:07:29 2024 by rpki-client on console-fra.rpki-client.org